On Tue, Dec 08, 2015 at 12:30:06PM -0800, Kees Cook wrote: > If we add this for not-nx, I would like to add it for not-rodata too. The W+X thing? I was under the impression we want to fix all those so that the ptdump check doesn't fire anymore. > I've never seen anyone actually use it. I was asked to include it out > of fear of some kind of rogue imagined CPU configuration that mixed NX > and non-NX capable CPUs in a single machine where the forced NX > re-enablement code would cause problems. As you might imagine, I'm not > aware of this case ever being an issue. ;) Right. :) Thanks. -- Regards/Gruss, Boris. ECO tip #101: Trim your mails when you reply. -- To unsubscribe from this list: send the line "unsubscribe linux-efi" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html